@datacules/agent-identity-fastify 0.2.1

package/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "@datacules/agent-identity-fastify",
+  "version": "0.2.1",
+  "private": false,
+  "description": "Fastify plugin for @datacules/agent-identity",
+  "main": "./dist/cjs/index.js",
+  "module": "./dist/esm/index.js",
+  "types": "./dist/types/index.d.ts",
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "type-check": "tsc --noEmit"
+  },
+  "peerDependencies": {
+    "@datacules/agent-identity": "^0.1.0",
+    "fastify": ">=4.0.0",
+    "fastify-plugin": ">=4.0.0"
+  },
+  "devDependencies": {
+    "@datacules/agent-identity": "*",
+    "fastify": "^4",
+    "fastify-plugin": "^4",
+    "typescript": "^5"
+  }
+}

package/src/index.ts

@@ -0,0 +1,81 @@
+/**
+ * Fastify plugin for @datacules/agent-identity.
+ *
+ * Decorates each request with resolvedCredential before the route handler runs.
+ *
+ * Usage:
+ *   import Fastify from 'fastify';
+ *   import { agentIdentityPlugin } from '@datacules/agent-identity-fastify';
+ *
+ *   const app = Fastify();
+ *   await app.register(agentIdentityPlugin, { credentials, rules, logger });
+ *
+ *   app.post('/ai/complete', async (request, reply) => {
+ *     const cred = request.resolvedCredential; // typed
+ *   });
+ */
+import fp from 'fastify-plugin';
+import { createRouter } from '@datacules/agent-identity';
+import type {
+  AgentRequestContext,
+  AuditLogger,
+  Credential,
+  ResolvedCredential,
+  RoutingRule,
+} from '@datacules/agent-identity';
+import type { FastifyPluginAsync, FastifyRequest, FastifyReply } from 'fastify';
+
+declare module 'fastify' {
+  interface FastifyRequest {
+    resolvedCredential: ResolvedCredential | null;
+  }
+}
+
+export interface AgentIdentityPluginOptions {
+  credentials: Credential[];
+  rules: RoutingRule[];
+  logger?: AuditLogger;
+  contextKey?: string;
+  passThrough?: boolean;
+}
+
+const plugin: FastifyPluginAsync<AgentIdentityPluginOptions> = async (fastify, options) => {
+  const {
+    credentials,
+    rules,
+    logger,
+    contextKey = 'agentContext',
+    passThrough = true,
+  } = options;
+
+  const router = createRouter(credentials, rules, logger);
+
+  fastify.decorateRequest('resolvedCredential', null);
+
+  fastify.addHook(
+    'preHandler',
+    async (request: FastifyRequest, reply: FastifyReply) => {
+      const body = request.body as Record<string, unknown> | null;
+      const ctx = body?.[contextKey] as AgentRequestContext | undefined;
+
+      if (!ctx) {
+        if (!passThrough) {
+          return reply.status(400).send({ error: `Missing required field: ${contextKey}` });
+        }
+        return;
+      }
+
+      const resolved = router.resolve(ctx);
+      if (!resolved) {
+        return reply.status(403).send({ error: 'No credential resolved for this context' });
+      }
+
+      request.resolvedCredential = resolved;
+    }
+  );
+};
+
+export const agentIdentityPlugin = fp(plugin, {
+  name: '@datacules/agent-identity-fastify',
+  fastify: '>=4.0.0',
+});